$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft File: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json) Hash identifier: CijsGGrkLjjqd4D6J1sL4tdKgK1eFQqApAOBCq+YEXI= Subject key identifier: C9:B6:FE:6B:03:6E:05:ED:60:4B:6F:29:FE:F9:8A:74:CE:CD:E8:D5 Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E Certificate issuer: /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft Manifest number: 058F Signing time: Fri 28 Mar 2025 23:32:27 +0000 Manifest this update: Fri 28 Mar 2025 23:32:26 +0000 Manifest next update: Fri 04 Apr 2025 23:32:26 +0000 Files and hashes: 1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: Qw+iWExoG46UTkSin4S8/diolAcBg5W1oh0CheyKIIQ=) 2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: zKxvUfg84Vzic8wgNEbv3jYhKTD7shMSTxfN8vMzwMs=) 3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: /FFxW4TannNv2a3yqsCchm+CH/MvcSFfyvNHDfDpVao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BCB6 Validity Not Before: Mar 28 23:32:26 2025 GMT Not After : Apr 4 23:32:26 2025 GMT Subject: CN=67e7318a-6c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:3a:a5:4e:68:2a:a6:10:23:86:b5:f0:14: d4:d4:3f:be:25:06:43:fb:ff:1d:a4:93:1d:c3:95: ee:fe:6d:46:07:48:7e:bb:a1:f6:a8:ca:f8:c3:9e: b8:09:92:68:d0:43:e1:1f:23:88:18:12:5d:b7:e6: da:e4:19:94:51:78:75:cb:a7:4f:5c:c5:66:5b:0d: 63:45:77:ba:ce:a8:0e:b5:49:8d:dc:50:bc:30:ae: 81:cf:ce:ab:05:c6:46:b8:d2:6b:89:e8:f3:55:bb: 67:3f:28:29:26:bc:b5:4f:08:e8:47:14:d6:20:93: 4a:77:1b:a4:a9:ba:77:8b:05:7b:68:92:01:5f:ef: 8d:12:bd:84:7e:8e:fb:5a:67:2e:94:32:9c:58:ea: 2a:c5:64:8e:4f:5e:18:a0:6e:f7:3e:0a:1f:78:30: 89:e6:d9:38:8e:81:eb:24:47:13:ba:28:44:db:ab: 37:e8:ca:6f:00:1e:8c:1e:5e:10:12:4a:60:0c:a6: c5:e5:a9:22:fd:df:7e:e7:74:d1:8d:7b:c2:3c:ac: bd:9b:eb:2c:c5:fa:58:e4:b4:c6:12:3c:e5:d5:4d: b1:59:b3:2e:2b:57:ec:a0:03:c8:38:f2:1c:a0:ab: 59:a3:bb:e1:fd:b7:7d:b6:5b:f3:b4:ff:1b:b1:76: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B6:FE:6B:03:6E:05:ED:60:4B:6F:29:FE:F9:8A:74:CE:CD:E8:D5 X509v3 Authority Key Identifier: keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0f:fa:42:73:6f:05:4b:7e:92:77:15:ef:21:7e:38:ad:7c: 30:90:70:f6:65:44:86:26:de:d0:ec:d3:92:8c:88:9e:87:d3: fe:89:97:e3:5b:ba:d4:2e:dd:65:a7:a2:89:50:91:67:a8:86: 80:f0:68:cb:74:41:13:c9:fa:57:16:88:6f:72:b2:70:aa:a7: 5f:d9:b5:6a:d9:f9:3a:97:ca:fe:04:eb:7d:ed:85:e5:49:75: 3a:da:b0:87:78:e3:5c:81:6d:79:c8:2f:d8:9b:3e:1b:b3:df: a4:49:61:aa:32:71:eb:20:ac:c6:b1:cf:2e:7a:fa:34:1f:c6: be:ab:8d:2b:ef:32:2b:94:b4:9d:81:9d:89:d3:46:50:29:21: 2a:8d:c6:b0:cd:43:d8:77:59:2c:a6:a0:e1:45:cb:6e:25:f1: 4d:8b:32:bb:0d:ca:29:d0:99:74:73:dc:ad:1d:88:5b:16:72: e3:95:0b:59:c7:67:cf:fa:35:3e:8e:9f:f8:cf:c0:cb:32:05: f0:c4:74:94:2c:44:b7:97:64:a5:5e:d2:ae:1b:ac:7e:c7:e4: 25:7f:88:fc:78:99:aa:b2:6f:0b:fb:ee:70:47:17:8c:85:8b: af:bd:7b:47:fc:07:6c:7b:69:0a:93:4e:6e:9f:6b:a2:33:92: 8f:63:ef:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDQjYxMTAvBgNVBAUTKDAxMTBCQjNBQjUwRTNBMEQ0NDkwQzMyMTAzQkJDNDA1 NERDNjgyMUUwHhcNMjUwMzI4MjMzMjI2WhcNMjUwNDA0MjMzMjI2WjAYMRYwFAYD VQQDEw02N2U3MzE4YS02YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4A6pU5oKqYQI4a18BTU1D++JQZD+/8dpJMdw5Xu/m1GB0h+u6H2qMr4w564 CZJo0EPhHyOIGBJdt+ba5BmUUXh1y6dPXMVmWw1jRXe6zqgOtUmN3FC8MK6Bz86r BcZGuNJriejzVbtnPygpJry1TwjoRxTWIJNKdxukqbp3iwV7aJIBX++NEr2Efo77 WmculDKcWOoqxWSOT14YoG73PgofeDCJ5tk4joHrJEcTuihE26s36MpvAB6MHl4Q EkpgDKbF5aki/d9+53TRjXvCPKy9m+ssxfpY5LTGEjzl1U2xWbMuK1fsoAPIOPIc oKtZo7vh/bd9tlvztP8bsXZutwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMm2/msD bgXtYEtvKf75inTOzejVMB8GA1UdIwQYMBaAFAEQuzq1DjoNRJDDIQO7xAVNxoIe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkNCNi8yQUI3Q0M1QUND RjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09nMUVrTU1oQTd2RUJVM0dn aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSQzdPclVPT2cxRWtNTWhBN3ZFQlUzR2doNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkNCNi8yQUI3Q0M1QUNDRjExMUVCOTE0MjE5NThDNEY5QUUwMi9BUkM3T3JVT09n MUVrTU1oQTd2RUJVM0dnaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDD/pCc28FS36SdxXvIX44rXwwkHD2ZUSGJt7Q7NOSjIieh9P+iZfj W7rULt1lp6KJUJFnqIaA8GjLdEETyfpXFohvcrJwqqdf2bVq2fk6l8r+BOt97YXl SXU62rCHeONcgW15yC/Ymz4bs9+kSWGqMnHrIKzGsc8uevo0H8a+q40r7zIrlLSd gZ2J00ZQKSEqjcawzUPYd1kspqDhRctuJfFNizK7Dcop0Jl0c9ytHYhbFnLjlQtZ x2fP+jU+jp/4z8DLMgXwxHSULES3l2SlXtKuG6x+x+Qlf4j8eJmqsm8L++5wRxeM hYuvvXtH/Adse2kKk05un2uiM5KPY+8F -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:50 2025 by rpki-client